"1 Million Impacted by Data Breach at NextGen Healthcare"

Healthcare solutions provider NextGen Healthcare has recently started informing roughly one million individuals that their personal information was compromised in a data breach.  The company makes and sells electronic health records software and provides doctors and medical professionals with practice management services.  NextGen Healthcare first identified suspicious activity on its systems on March 30, 2023.  The investigation launched into the matter revealed that an unauthorized party had access to those systems between March 29 and April 14, 2023.  The company noted that during that time, the attackers accessed personal information such as names, addresses, birth dates, and Social Security numbers.  The company says it has no evidence that the unauthorized party had access to health or medical records and data.  NextGen Healthcare noted that the attackers accessed its database using "client credentials that appear to have been stolen from other sources or incidents unrelated to NextGen."  The company stated that it reset passwords to contain the incident and informed law enforcement of the breach, and has been working with them throughout the investigation.

SecurityWeek reports: "1 Million Impacted by Data Breach at NextGen Healthcare"